$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: UnyCx4I/B0/vZrRvuX9CvGMLOaQNylXmAImMb46C8hc= Subject key identifier: 9E:B4:C2:E0:5B:24:76:40:B8:36:AB:43:08:73:D1:61:75:AD:EF:EA Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 2F2C21DBD45BD8BFF7AFDF4F79FBA2A011BEDE0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 04F8 Signing time: Wed 23 Jul 2025 09:31:54 +0000 Manifest this update: Wed 23 Jul 2025 09:26:54 +0000 Manifest next update: Sat 26 Jul 2025 14:12:54 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 2: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 3: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 4: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 5: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: qh65Ja4W00XULW17ZGr87yzYE0sf/SIrlNXmOCOWX/w=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2c:21:db:d4:5b:d8:bf:f7:af:df:4f:79:fb:a2:a0:11:be:de:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Jul 23 09:26:54 2025 GMT Not After : Jul 26 14:12:54 2025 GMT Subject: CN=9EB4C2E05B247640B836AB430873D16175ADEFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:ee:07:bf:c2:da:01:f3:f2:04:45:5d:12: 5e:23:46:9e:82:50:7d:5c:95:36:03:6a:44:78:a6: 46:ba:14:b5:8a:8d:8d:83:93:80:13:03:1d:99:91: 38:8e:45:aa:1b:d0:6c:c2:cc:f1:5e:05:b8:90:db: a1:ce:e9:48:7e:bb:db:cb:97:09:9d:1c:7d:9f:5b: d5:1c:e3:5b:01:96:2a:03:89:89:31:c0:ff:8e:63: fd:b3:d7:03:f2:e8:de:fb:92:ea:bc:d1:2e:fc:45: 6a:f1:f2:18:d8:b0:2a:bf:d3:e1:a2:71:c4:d6:01: c2:0a:3d:b3:14:71:d2:02:0a:1b:48:9f:55:e7:65: 9c:5c:b3:d3:bb:53:e2:cc:cb:92:0e:e9:e8:43:25: 4f:7e:bc:65:e6:05:8e:15:38:91:b2:c8:e5:96:55: d5:7b:4b:ed:6a:b8:d0:ba:80:eb:b0:b7:46:d1:9a: 12:08:3c:59:a3:d5:79:e0:55:84:3d:2e:a0:53:0b: 28:3c:a8:80:ca:b4:ac:55:16:96:1d:54:fc:33:3c: f8:46:6f:27:31:6b:03:af:66:c1:83:8e:e2:cf:e6: 5e:c6:94:fd:95:0f:ed:99:78:6e:7d:c1:5f:1f:53: fa:22:2c:af:cf:e5:39:30:6f:42:70:6e:90:52:af: 42:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:C2:E0:5B:24:76:40:B8:36:AB:43:08:73:D1:61:75:AD:EF:EA X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1e:c6:df:09:d6:a4:b2:74:47:e1:7c:78:03:c2:94:91:b6: 99:48:63:21:78:22:79:19:bc:df:bf:12:84:72:f4:02:8e:04: 2f:36:c9:a0:46:46:0d:55:52:bd:73:3a:5d:e6:d4:48:08:09: f0:e6:3d:a6:e8:4c:40:3e:9f:a0:aa:62:98:13:fa:5c:25:28: 9c:e8:98:cf:5c:bf:b8:f2:1c:0c:d9:70:ae:be:bd:1a:ca:58: 0b:a3:41:20:d7:8d:8f:97:44:47:9b:ab:8b:7e:32:a8:b6:d1: 50:9b:96:cf:46:4a:6c:7f:d4:91:35:9b:98:64:97:7a:70:04: db:d1:c4:cb:a6:68:e1:34:15:d9:42:7f:62:4c:7c:d3:1f:14: 72:b3:2f:29:e1:c7:d0:9a:a3:52:4f:dd:48:89:fe:26:5e:91: 95:94:5c:f3:dc:af:89:67:11:53:d0:9e:b7:fe:8f:99:96:63: 08:c1:1e:47:99:dc:6a:e1:ab:da:c2:c6:ad:e6:94:ec:2e:19: b9:95:78:a7:bb:e9:47:e9:4a:a9:4b:20:1d:21:01:2f:68:b8: 32:87:ae:aa:f0:ad:fb:be:01:27:27:51:0e:47:4d:46:4f:40: a3:55:6c:c7:3f:8e:98:33:8e:59:69:07:77:ef:4c:2a:5e:c6: f5:cf:bc:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULywh29Rb2L/3r99PefuioBG+3gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTA3MjMwOTI2NTRaFw0yNTA3MjYxNDEyNTRaMDMxMTAvBgNV BAMTKDlFQjRDMkUwNUIyNDc2NDBCODM2QUI0MzA4NzNEMTYxNzVBREVGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ku4Hv8LaAfPyBEVdEl4jRp6C UH1clTYDakR4pka6FLWKjY2Dk4ATAx2ZkTiORaob0GzCzPFeBbiQ26HO6Uh+u9vL lwmdHH2fW9Uc41sBlioDiYkxwP+OY/2z1wPy6N77kuq80S78RWrx8hjYsCq/0+Gi ccTWAcIKPbMUcdICChtIn1XnZZxcs9O7U+LMy5IO6ehDJU9+vGXmBY4VOJGyyOWW VdV7S+1quNC6gOuwt0bRmhIIPFmj1XngVYQ9LqBTCyg8qIDKtKxVFpYdVPwzPPhG bycxawOvZsGDjuLP5l7GlP2VD+2ZeG59wV8fU/oiLK/P5Tkwb0JwbpBSr0IRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrTC4FskdkC4NqtDCHPRYXWt7+owHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkext8J1qSydEfhfHgDwpSRtplIYyF4InkZ vN+/EoRy9AKOBC82yaBGRg1VUr1zOl3m1EgICfDmPaboTEA+n6CqYpgT+lwlKJzo mM9cv7jyHAzZcK6+vRrKWAujQSDXjY+XREebq4t+Mqi20VCbls9GSmx/1JE1m5hk l3pwBNvRxMumaOE0FdlCf2JMfNMfFHKzLynhx9Cao1JP3UiJ/iZekZWUXPPcr4ln EVPQnrf+j5mWYwjBHkeZ3Grhq9rCxq3mlOwuGbmVeKe76UfpSqlLIB0hAS9ouDKH rqrwrfu+AScnUQ5HTUZPQKNVbMc/jpgzjllpB3fvTCpexvXPvAQ= -----END CERTIFICATE-----Generated at Wed Jul 23 12:02:40 2025 by rpki-client